Skip to content

build(deps): bump ws, eth-crypto, ethers, @ethersproject/providers and web3 in /sdk/js#143

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sdk/js/multi-7ade85d0d7
Open

build(deps): bump ws, eth-crypto, ethers, @ethersproject/providers and web3 in /sdk/js#143
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sdk/js/multi-7ade85d0d7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown

Bumps ws to 7.5.11 and updates ancestor dependencies ws, eth-crypto, ethers, @ethersproject/providers and web3. These dependencies need to be updated together.

Updates ws from 7.5.9 to 7.5.11

Release notes

Sourced from ws's releases.

7.5.11

Bug fixes

  • Backported 2b2abd45 to the 7.x release line (e14c4586).

7.5.10

Bug fixes

  • Backported e55e5106 to the 7.x release line (22c28763).
Commits

Updates ws from 8.9.0 to 8.21.0

Release notes

Sourced from ws's releases.

7.5.11

Bug fixes

  • Backported 2b2abd45 to the 7.x release line (e14c4586).

7.5.10

Bug fixes

  • Backported e55e5106 to the 7.x release line (22c28763).
Commits

Updates eth-crypto from 2.6.0 to 2.8.0

Release notes

Sourced from eth-crypto's releases.

2.7.0

Updated the dependencies.

Commits

Updates ethers from 5.7.2 to 5.8.0

Release notes

Sourced from ethers's releases.

ethers/v5.8.0 (2025-02-25 19:15) [legacy version]

This is a security update for the legacy Ethers v5 branch, addressing two security fixes.

For those that wish to audit the specific changes in the the bundled version between v5.7 and v5.8, see this gist.

Changes

  • Updated to latest elliptic library to fix audit warnings. (f8deaae)
  • Added ENS to Sepolia. (0065547)
  • Bump ws package version to address DoS security concern. (#4791; f345816)
  • Added modern networks, updated third-party backend URLs and added QuickNode. (#3935, #4010; f7c813d)

Embedding UMD with SRI:

<script type="text/javascript"
  integrity="sha384-KpyAXoFibPIUEi79EsnN1EtEWCCrOQ8MtGsa4IrVxeZo514PYarFXujnjyu0DzgC"
  crossorigin="anonymous"
  src="https://cdnjs.cloudflare.com/ajax/libs/ethers/5.8.0/ethers.umd.min.js">
</script>
Changelog

Sourced from ethers's changelog.

ethers/v5.8.0 (2025-02-25 19:15)

  • Updated to latest elliptic library to fix audit warnings. (f8deaae)
  • Added ENS to Sepolia. (0065547)
  • Bump ws package version to address DoS security concern. (#4791; f345816)
  • Added modern networks, updated third-party backend URLs and added QuickNode. (#3935, #4010; f7c813d)
Commits
  • 5ff3dc9 admin: updated dist files with update-versions
  • 808153e admin: updated sort issue in package.json
  • f8deaae Updated to latest elliptic library to fix audit warnings.
  • c6a1b15 Updated browser tests; but karma is still defunct
  • c7c07f5 admin: update dist files
  • 01dccc7 tests: swapped goerli for sepolia; contracts re-deployed
  • 0065547 Added ENS to Sepolia.
  • d7e8ad1 admin: updated dist files
  • f345816 Bump ws package version to address DoS security concern (#4791).
  • 9f42637 tests: updates test details
  • Additional commits viewable in compare view

Updates @ethersproject/providers from 5.7.2 to 5.8.0

Release notes

Sourced from @​ethersproject/providers's releases.

ethers/v5.8.0 (2025-02-25 19:15) [legacy version]

This is a security update for the legacy Ethers v5 branch, addressing two security fixes.

For those that wish to audit the specific changes in the the bundled version between v5.7 and v5.8, see this gist.

Changes

  • Updated to latest elliptic library to fix audit warnings. (f8deaae)
  • Added ENS to Sepolia. (0065547)
  • Bump ws package version to address DoS security concern. (#4791; f345816)
  • Added modern networks, updated third-party backend URLs and added QuickNode. (#3935, #4010; f7c813d)

Embedding UMD with SRI:

<script type="text/javascript"
  integrity="sha384-KpyAXoFibPIUEi79EsnN1EtEWCCrOQ8MtGsa4IrVxeZo514PYarFXujnjyu0DzgC"
  crossorigin="anonymous"
  src="https://cdnjs.cloudflare.com/ajax/libs/ethers/5.8.0/ethers.umd.min.js">
</script>
Changelog

Sourced from @​ethersproject/providers's changelog.

ethers/v5.8.0 (2025-02-25 19:15)

  • Updated to latest elliptic library to fix audit warnings. (f8deaae)
  • Added ENS to Sepolia. (0065547)
  • Bump ws package version to address DoS security concern. (#4791; f345816)
  • Added modern networks, updated third-party backend URLs and added QuickNode. (#3935, #4010; f7c813d)
Commits
  • f345816 Bump ws package version to address DoS security concern (#4791).
  • fa5f647 admin: updated dist files
  • f7c813d Added modern networks, updated third-party backend URLs and added QuickNode (...
  • See full diff in compare view

Updates web3 from 1.8.1 to 4.16.0

Release notes

Sourced from web3's releases.

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Changed

  • Update version to 1.0.0-alpha.1 for web3-providers-base
  • Update version to 4.0.0-alpha.0 for web3-utils in web3-providers-base

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Initial alpha release

Install with yarn add [email protected]

Changelog

Sourced from web3's changelog.

[4.16.0]

Fixed

web3

  • Export Web3Account, Wallet and signature related types. (#7374)

web3-utils

  • Make fromWei return "0" when input is 0 (#7387)

Removed

web3-eth-accounts

  • Move signature related types to web3-types. Re-export them for backwards compatibility. (#7374)

Added

web3-types

  • Add signature related types. (#7374)
  • Updated Typescript version 4 -> 5 (#7272)

web3-eth-accounts

  • Updated Typescript version 4 -> 5 (#7272)

web3

  • Updated Typescript version 4 -> 5 (#7272)

web3-core

  • Updated Typescript version 4 -> 5 (#7272)

web3-account-abstraction

  • RC release

web3-errors

  • Updated Typescript version 4 -> 5 (#7272)

web3-eth

  • Updated Typescript version 4 -> 5 (#7272)

web3-eth-contract

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by luu-alex, a new releaser for web3 since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump ws, eth-crypto, ethers, @ethersproject/providers an…
1f2f7bb 
…d web3

Bumps [ws](https://github.com/websockets/ws) to 7.5.11 and updates ancestor dependencies [ws](https://github.com/websockets/ws), [eth-crypto](https://github.com/pubkey/eth-crypto), [ethers](https://github.com/ethers-io/ethers.js), [@ethersproject/providers](https://github.com/ethers-io/ethers.js/tree/HEAD/packages/providers) and [web3](https://github.com/ChainSafe/web3.js). These dependencies need to be updated together.


Updates `ws` from 7.5.9 to 7.5.11
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.9...7.5.11)

Updates `ws` from 8.9.0 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.9...7.5.11)

Updates `eth-crypto` from 2.6.0 to 2.8.0
- [Release notes](https://github.com/pubkey/eth-crypto/releases)
- [Commits](https://github.com/pubkey/eth-crypto/commits)

Updates `ethers` from 5.7.2 to 5.8.0
- [Release notes](https://github.com/ethers-io/ethers.js/releases)
- [Changelog](https://github.com/ethers-io/ethers.js/blob/v5.8.0/CHANGELOG.md)
- [Commits](ethers-io/ethers.js@v5.7.2...v5.8.0)

Updates `@ethersproject/providers` from 5.7.2 to 5.8.0
- [Release notes](https://github.com/ethers-io/ethers.js/releases)
- [Changelog](https://github.com/ethers-io/ethers.js/blob/v5.8.0/CHANGELOG.md)
- [Commits](https://github.com/ethers-io/ethers.js/commits/v5.8.0/packages/providers)

Updates `web3` from 1.8.1 to 4.16.0
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md)
- [Commits](web3/web3.js@v1.8.1...v4.16.0)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 7.5.11
  dependency-type: indirect
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: indirect
- dependency-name: eth-crypto
  dependency-version: 2.8.0
  dependency-type: indirect
- dependency-name: ethers
  dependency-version: 5.8.0
  dependency-type: direct:development
- dependency-name: "@ethersproject/providers"
  dependency-version: 5.8.0
  dependency-type: indirect
- dependency-name: web3
  dependency-version: 4.16.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 20, 2026
@dependabot dependabot Bot mentioned this pull request Jun 20, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants